An engineer is building a new distributed Cisco ISE deployment with four nodes. Management insists that all configuration changes, policy edits, and node registrations be performed from a single authoritative source, while a second node stands ready to take over administration if the first fails. Which persona configuration on the first node satisfies this requirement?